From: Arno Wagner <arno@wagner.name>
To: Martin Olsson <martinolsson311@yahoo.com>
Cc: "cryptsetup@lists.linux.dev" <cryptsetup@lists.linux.dev>
Subject: Re: Password hash as LUKS key
Date: Fri, 10 Mar 2023 02:19:52 +0100 [thread overview]
Message-ID: <20230310011952.GA1141@tansi.org> (raw)
In-Reply-To: <1738775229.2387123.1678372528163@mail.yahoo.com>
You probably have an issue with line endings. In priciple,
this works and is supported, but interactive, pipe and
read-from-file are all a bit different.
The man-page has more info on this. Best try it out with a
really simple password like "test".
Regards,
Arno
On Thu, Mar 09, 2023 at 15:35:28 CET, Martin Olsson wrote:
> Hey,
>
> I want to encrypt drives for users. I want to avoid having their password sent to me in clear text.
> I was thinking of having them use a tool like mkpasswd to create a password hash and then
> pipe the generated hash into cryptsetup luksAddKey.
>
> Unfortunately that didn't work when I tried it.
>
> So I guess it's not supported right? Maybe you know some other way to achieve what I want to accomplish?
>
> BR,
> Martin
--
Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@wagner.name
GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato
If it's in the news, don't worry about it. The very definition of
"news" is "something that hardly ever happens." -- Bruce Schneier
next prev parent reply other threads:[~2023-03-10 1:20 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <1738775229.2387123.1678372528163.ref@mail.yahoo.com>
2023-03-09 14:35 ` Password hash as LUKS key Martin Olsson
2023-03-10 1:19 ` Arno Wagner [this message]
2023-03-15 15:11 ` Martin Olsson
2023-03-15 16:24 ` Grzegorz Szymaszek
2023-03-15 20:35 ` Michael Kjörling
2023-03-20 17:06 ` Martin Olsson
2023-03-20 18:53 ` Arno Wagner
2023-03-20 20:38 ` Michael Kjörling
2023-03-21 17:52 ` Arno Wagner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20230310011952.GA1141@tansi.org \
--to=arno@wagner.name \
--cc=cryptsetup@lists.linux.dev \
--cc=martinolsson311@yahoo.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox